Subject: bin/1016: mrinfo should be setuid root
To: None <gnats-admin@sun-lamp.cs.berkeley.edu>
From: John Hawkinson <jhawk@MIT.EDU>
List: netbsd-bugs
Date: 05/03/1995 10:05:04
>Number: 1016
>Category: bin
>Synopsis: mrinfo should be setuid root
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: bin-bug-people (Utility Bug People)
>State: open
>Class: change-request
>Submitter-Id: net
>Arrival-Date: Wed May 3 10:05:02 1995
>Originator: John Hawkinson
>Organization:
MIT SIPB
>Release: 3 May 1995
>Environment:
System: NetBSD quiche-lorraine 1.0A NetBSD 1.0A (ATHENA-AHA) #8: Wed Apr 26 20:19:45 EDT 1995 jhawk@lola-granola:/afs/sipb.mit.edu/project/netbsd/dev/current-source/src/sys/arch/i386/compile/ATHENA-AHA i386
>Description:
mrinfo is not setuid root, so normal users can't run it.
This doesn't seem very useful; there's no reason to restrict
the ability of users to query multicast routers as to who/what
they connect to.
>How-To-Repeat:
>Fix:
*** Makefile 1995/05/03 16:49:06 1.1
--- Makefile 1995/05/03 16:49:43
***************
*** 1,5 ****
# from: Id: Makefile,v 1.5 1993/06/24 05:11:16 deering Exp
! # $Id: Makefile,v 1.1 1995/05/03 16:49:06 jhawk Exp jhawk $
.PATH: ${.CURDIR}/..
CFLAGS+= -I${.CURDIR}/..
--- 1,5 ----
# from: Id: Makefile,v 1.5 1993/06/24 05:11:16 deering Exp
! # $Id: Makefile,v 1.1 1995/05/03 16:49:06 jhawk Exp $
.PATH: ${.CURDIR}/..
CFLAGS+= -I${.CURDIR}/..
***************
*** 7,12 ****
--- 7,15 ----
PROG= mrinfo
SRCS= igmp.c inet.c kern.c mrinfo.c
NOMAN= noman
+ BINOWN= root
+ BINMODE=4555
+
.include "../../Makefile.inc"
.include <bsd.prog.mk>
>Audit-Trail:
>Unformatted: